A large amount of research has been dedicated to adversarial example attacks and defenses in the literature [1]}. In this section, we briefly introduce AE attacks and give more detailed discussions on existing AE defense solutions.
